#2Tools for observing malware behavior in isolated environments to understand its actions and impact.
Kitploit recommended
qianlijaingshan/fastgpt-sandbox-auditFastGPT Python sandbox escape chain audit tool (CVE-2026-32128 related, v4.14.8 inspect chain)
hunt-benito/rendering-code-outside-the-sandbox-cve-2026-76036-dawn-webgpu-buffer-overflow-in-chrome-on-androidDifferential detection harness for CVE-2026-76036, a Dawn WebGPU heap buffer overflow in Chrome on Android. Probes vulnerable depth/stencil texture…
shcesama/cve-2023-4863-analysisEducational analysis of CVE-2023-4863 (libwebp heap buffer overflow) with Blue Team detection tools, static WebP scanner, defensive Java validator,…
egkritsis/cve-2025-61303Critical Vulnerability (9.8) - RecordedFuture Triage dynamic analysis engine can fail to record malicious behavior when samples produce very…
egkritsis/cve-2025-61301CVE-2025-61301 proof-of-concept demonstrating denial-of-analysis in CAPEv2 via recursive process forking that triggers MongoDB BSON limits and orjson…
humoud/hookethA set of scripts that ease working with frida
johanneslks/cve-2026-32945PJSIP DNS Compression Pointer Heap OOB Read (Remote DoS)
ycseo-git/cve-2025-55182a.k.a. React2Shell
vesjolyjd/kaspersky_cve-2024-3094Security review of CVE-2024-3094 (XZ Utils backdoor) including threat modeling, static/dynamic code analysis, fuzzing with AFL++, and a…
lat-06/cve-2026-34197Proof-of-concept exploit for CVE-2026-34197, demonstrating authenticated remote code execution in Apache ActiveMQ via Jolokia JMX-HTTP bridge and…
f2u0a0d3/cve-2026-42945-nginx-rift-pocPoC for CVE-2026-42945 (nginx Rift) — heap buffer overflow in ngx_http_rewrite_module. Includes detect/probe/exploit modes, dual-fixture Docker lab,…
tang-yikai/copy-fail-mitigation-with-bpftraceCVE-2026-31431, AKA Copy Fail, can be mitigated in one-line with bpftrace
forxiucn/nginx-cve-2026-42945-pocProof-of-concept exploit for CVE-2026-42945, a critical heap overflow in NGINX rewrite module enabling unauthenticated remote code execution via…
bhanunamikaze/cve-2026-2587-exploit-pocCVE-2026-2587 PoC validator for Eclipse GlassFish EL Injection RCE in the admin console gadget.jsf handler. Safe authenticated vulnerability scanner…
trerb/markdown-exfil-testerBlack-box test whether an LLM chatbot is vulnerable to markdown/HTML exfil (CVE-2025-32711 class). Spins up a sink, sends payloads, renders in…
hulina9900-boop/diy-cve-2026-42945-pocProof-of-concept exploit environment for CVE-2026-42945 targeting nginx 1.30.0 on Ubuntu 22.04 with PHP-FPM, packaged as a Docker-based local testing…
yuting-huang0/spring4shell-ctfSpring4Shell (CVE-2022-22965) 漏洞環境搭建與 CTF 題目
